If its open source thats great, but most people are not building the clients for iOS and MacOS at home. We trust the builds that they host to be true to the source.
1password lists its physical address on its home page (and I think every page).
Lastpass is part of Logmein, an established tech company in Boston.
I'm very wary of a password manager trojan horse, similar to the Kaspersky incident.